MS13-067: Description of the security update for Excel Services in SharePoint Server 2010: September 10, 2013

Introduction

This security update resolves vulnerabilities in Microsoft Office server software that could allow remote code execution in the context of the W3wp.exe process service account.

Summary

Microsoft has released security bulletin MS13-067. To view the complete security bulletin, go to one of the following Microsoft websites:

How to obtain help and support for this security update

Help installing updates: Support for Microsoft Update

Security solutions for IT professionals: TechNet Security Troubleshooting and Support

Help protect your Windows-based computer from viruses and malware: Virus Solution and Security Center

Local support according to your country: International Support

More information about this security update

Prerequisites to apply this security update

To apply this security update, you must have Service Pack 1 or Service Pack 2 for Microsoft SharePoint Server 2010 installed on the computer.

Restart information

You may have to restart the computer after you install this security update.

In some cases, this update does not require a restart. If the required files are being used, this update will require a restart. If this behavior occurs, a message is displayed that advises you to restart the computer.

To help reduce the possibility that a restart will be required, stop all affected services and close all applications that may use the affected files before you install this security update.

See Why you may be prompted to restart your computer after you install a security update on a Windows-based computer for more information.

Removal information

This security update cannot be removed.

Security update replacement information

This security update does not replace any previous security update.

The English version of this security update has the file attributes (or later file attributes) that are listed in the following table. The dates and times for these files are listed in Coordinated Universal Time (UTC). When you view the file information, it is converted to local time. To find the difference between UTC and local time, use the Time Zone tab in the Date and Time item in Control Panel.

File name

File version

File size

Date

Time

Dynamicgridcontent.asmx

Not applicable

313

12-Feb-2008

12:44

Ecscalcserver.dll

14.0.6112.5000

636,784

12-Oct-2011

11:50

Ewabrowsercompat.js

Not applicable

6,565

05-Nov-2009

11:47

Ewachart.png

Not applicable

91,313

29-Mar-2011

11:15

Ewacmdui.xml

Not applicable

116,740

30-Mar-2011

03:13

Ewainternalwebservice.asmx

Not applicable

322

12-Feb-2008

12:44

Ewamoss.js

Not applicable

786,371

09-Jan-2013

11:36

Ewanewwpctrl.ascx

Not applicable

2,202

15-Jun-2009

01:07

Ewaparameterstaskpane.ascx

Not applicable

1,511

28-Sep-2009

09:29

Ewareadmodetoolbar.ascx

Not applicable

3,963

30-Mar-2011

03:13

Ewastringshandler.ashx

Not applicable

317

22-Nov-2012

08:59

Ewrdynamicimageprovider.aspx

Not applicable

433

02-Jun-2009

11:56

Ewrdynamicslicerprovider.aspx

Not applicable

529

02-Jun-2009

11:56

Ewrtreeview.js

Not applicable

19,012

15-Jun-2009

01:08

Ewrxlfilehandler.aspx

Not applicable

421

02-Jun-2009

11:56

Ewrxlviewer.aspx

Not applicable

9,316

30-Mar-2011

03:17

Ewrxlviewerinternal.aspx

Not applicable

13,540

30-Mar-2011

03:17

Excelrest.aspx

Not applicable

923

20-Mar-2009

02:02

Excelservercreateapplication.aspx

Not applicable

5,364

04-Sep-2009

05:03

Excelserversafedataprovider.aspx

Not applicable

6,188

20-Sep-2008

08:29

Excelserversafedataproviders.aspx

Not applicable

5,219

20-Sep-2008

08:29

Excelserversettings.aspx

Not applicable

10,724

21-Apr-2009

11:42

Excelservertrusteddcl.aspx

Not applicable

5,753

20-Jan-2009

03:23

Excelservertrusteddcls.aspx

Not applicable

5,196

20-Sep-2008

08:30

Excelservertrustedlocation.aspx

Not applicable

11,928

04-Sep-2009

05:03

Excelservertrustedlocations.aspx

Not applicable

5,213

20-Sep-2008

08:30

Excelserveruserdefinedfunction.aspx

Not applicable

6,048

20-Jan-2009

03:24

Excelserveruserdefinedfunctions.aspx

Not applicable

5,229

20-Sep-2008

08:30

Excelservicedisco.aspx

Not applicable

1,401

21-Feb-2008

11:53

Excelservicesadmin.aspx

Not applicable

5,861

20-Jan-2009

03:24

Excelservicewsdl.aspx

Not applicable

58,456

15-Jun-2009

01:06

Excelwebrenderer.ascx

Not applicable

4,877

30-Mar-2011

03:13

Inputformexcelserversetting.ascx

Not applicable

2,777

21-Feb-2008

11:42

Mewadynamicimageprovider.aspx

Not applicable

433

02-Jun-2009

11:56

Microsoft.office.excel.webui.internal.dll

14.0.7006.1000

641,640

22-Nov-2012

09:18

Microsoft.office.excel.webui.mobile.dll

14.0.7005.1000

113,224

01-Nov-2012

08:03

Slicerrenderer.ascx

Not applicable

7,687

05-Nov-2009

11:44

Xlsrv.dll

14.0.7104.5000

14,652,600

29-Jun-2013

05:52

Xlsrvintl.dll.1033

14.0.7104.5000

106,176

26-Jun-2013

03:34


Need more help?

Expand your skills
Explore Training
Get new features first
Join Microsoft Insiders

Was this information helpful?

Thank you for your feedback!

Thank you for your feedback! It sounds like it might be helpful to connect you to one of our Office support agents.

×